YPYogeshwar Peelainexploitnotes.hashnode.dev·4d ago · 8 min readTryHackMe: Binary Heaven - WriteupSummary A locked-down TryHackMe box gating SSH access behind two credential-checking binaries: a small C program with an anti-debug/obfuscated string comparison, and a statically linked Go binary hidi00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Sep 22 · 8 min readTryHackMe: Python Playground WriteupSummary Python Playground is a hard-rated TryHackMe box built around a "sandboxed" Python code execution service fronted by a Node.js/Express web app. The site advertises a blacklist-based filter that00
JJebitokinsharonjebitok.com·Sep 22 · 7 min readChallenge: Operation Coldstart (TryHackMe)Link to the challenge on TryHackMe: Operation Coldstart Volt Labs, a small SaaS shop, suspects an old staging server has rotted into an exposed liability. Mara has assigned you the engagement. Find y00
JJebitokinsharonjebitok.com·Sep 22 · 9 min readChallenge: Brr (TryHackMe)Link to the challenge on TryHackMe: Brr The cold never lies, but the SCADA panel guarding it just handed you the keys. Chase the chill all the way down. Note: The VM takes about 3 minutes to boot up00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Sep 10 · 10 min readTryHackMe - Olympus WriteupSummary Olympus is a Linux box built around an old Victor CMS 1.0 install hidden under /~webmaster/. An unauthenticated SQL injection in the CMS search feature was the root of the entire chain: it dum00
JJebitokinsharonjebitok.com·Sep 9 · 13 min readLinux Privilege Escalation: AutomationLink to the challenge on TryHackMe: Linux Privilege Escalation: Automation Introduction Automation earns its keep in privilege escalation the moment you stop treating it as a replacement for manual en00
JJebitokinsharonjebitok.com·Sep 6 · 11 min readChallenge: Expose (TryHackMe)Challenge on TryHackme: Expose Introduction Expose is a TryHackMe room focused on the risks of leaving unnecessary services running on a machine. The attack surface includes FTP, SSH, DNS, HTTP on a n00
JJebitokinsharonjebitok.com·Sep 6 · 8 min readChallenge: Hammer (TryHackMe)Challenge on TryHackMe: Hammer Introduction Hammer is a web-focused THM challenge that chains together several small missteps into a full authentication bypass and RCE. The box exposes a login portal 00
JJebitokinsharonjebitok.com·Aug 29 · 15 min readOperation Promotion (TryHackMe)Challenge on TryHackMe: Operation Promotion You are up for promotion at Hadron Security. Your senior lead, Mara, has handed you a solo engagement against RecruitCorp, a small recruiting firm with a pu00
SSunnyincybersecurity-learning.hashnode.dev·Aug 27 · 6 min readTryHackMe Network Services 2 Room: Comprehensive Learning Guide & Deep DiveIntroduction I recently completed the Network Services 2 room on TryHackMe as part of my ongoing cybersecurity learning journey. While foundational network security focuses on standard web traffic and00